Repeat-Until-Success quantum computing using stationary and flying qubits 
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We introduce an architecture for robust and scalable quantum computation using both stationary 
qubits (e.g. single photon sources made out of trapped atoms, molecules, ions, quantum dots, or 
defect centers in solids) and flying qubits (e.g. photons). Our scheme solves some of the most press- 
ing problems in existing non-hybrid proposals, which include the difficulty of scaling conventional 
stationary qubit approaches, and the lack of practical means for storing single photons in linear 
optics setups. We combine elements of two previous proposals for distributed quantum computing, 
namely the efflcient photon-loss tolerant build up of cluster states by Barrett and Kok [Phys. Rev. 
A 71, 060310 (2005)] with the idea of Repeat-Until-Success (RUS) quantum computing by Lim et 
al. [Phys. Rev. Lett. 95,030505 (2005)]. This idea can be used to perform eventually deterministic 
two-qubit logic gates on spatially separated stationary qubits via photon pair measurements. Under 
non-ideal conditions, where photon loss is a possibility, the resulting gates can still be used to build 
graph states for one-way quantum computing. In this paper, we describe the RUS method, present 
possible experimental realizations, and analyse the generation of graph states. 

PACS numbers: 03.67.Lx, 42.50.Dv 



I. INTRODUCTION 

Quantum computing offers a way to realize certain algo- 
rithms exponentially more efficiently than with the best 
known classical solutions 0, 13 ■ A substantial effort has 
therefore been made to develop the corresponding quan- 
tum technologies. Proof-of-principle experiments demon- 
strating the feasibility of quantum computing have al- 
ready been performed: Using nuclear magnetic resonance 
techniques, Vandersypen et al. |^ realized a simple in- 
stance of Shor's algorithm by factoring 15 = 3 x 5. A 
two qubit gate has been implemented in a color center in 
diamond, utilizing the electron spin state of the nitrogen- 
vacancy defect center together with a nearby nuclear spin 
as qubits Groups in Innsbruck and Boulder imple- 
mented a universal two-qubit gate in an ion trap , 
and the three-qubit teleportation protocol 0, llj • Adding 
more qubits to this "proto quantum computer" will in- 
crease the density of the motional states used for the 
two-qubit interaction. Consequently, it will become even 
harder to implement clean two-qubit gates. Scaling ion 
trap quantum computers much further therefore seems 
to require some form of distributed quantum information 
processing, possibly involving ion transport 0]. 

The schemes mentioned above are based on manip- 
ulating stationary qubits such as atoms, molecules, or 
trapped ions. An alternative route to finding a feasible 
and scalable technology for building quantum computers 
is based on flying qubits, such as photons. The main 
advantage of photons is their extremely long coherence 
time: In vacuum and in simple dielectric media, photons 
do not interact with their environment, and hence do not 
lose their quantum information. This is why photons are 
usually the qubits of choice for quantum communication 
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FIG. 1: Experimental realization of a universal two-qubit gate 
for the considered network of single photon sources (station- 
ary qubits). This requires the generation of a photon within 
each of the sources involved. The two photons then pass 
within their coherence time through a linear optics network, 
which performs a certain photon pair measurement. 



[lOl [T]| . However, at the same time this lack of inter- 
action means that it is very hard to create two-photon 
entangling gates. It therefore came as a surprise that 
the bosonic symmetry requirement of the electromagnetic 
field, together with photon counting and proper single- 
photon sources, is sufficient for implementing scalable 
quantum computing isi]. The overhead cost for Linear 
Optical Quantum Computing (LOQC) has subsequently 
been brought down significantly. In particular, the one- 
way or cluster-state model for quantum computing 
has allowed for drastic improvements in the scalability 
0, dfij • Recently, a four-qubit cluster state was re- 
alized experimentally by Walther et al. |l7j . The main 
drawbacks of LOQC are the difficulties of maintaining in- 
terferometric stability, the lack of practical 'on demand' 
single-photon sources and the lack of quantum memories 
for photonic qubits [T8|. 

In this paper, we consider the practical advantage of 
combining stationary and flying qubits for the realisa- 
tion of scalable quantum computing. The stationary 
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qubits (single photon sources) are arranged in a net- 
work of nodes with each node processing and storing 
a small number of qubits. To achieve scalability, the 
concept of distributed quantum computing was intro- 
duced and it was proposed that distant qubits communi- 
cate with each other through the means of flying qubits 
(i.e. photons) 0, |23|. Initial schemes for the imple- 
mentation of this idea relied on entangled ancillas as 
a resource [H IH HHl^. Others required that 
the photon from one source is fed into another source 

mm El El mill or a photon-mediated interaction 

between two fiber-coupled distant cavities needed to be 
established [H. More hybrid a ppr oaches to quantum 
computing can be found in Refs. [Sllls^. 

Other authors developed schemes for the probabilis- 
tic generation of highl y en tangled states between distant 
single photon sources |2l M El El El El IS EH ■ 
In these schemes, one generates a photon in each of the 
sources and then performs an entangling photon mea- 
surement. By virtue of entanglement swapping, this re- 
sults in entangled stationary qubits. It has been shown 
that similar ideas can also result in the implementation of 
probabilistic remote two-qubit gates 0. At this point, 
it was believed that scalable quantum computing with 
distant photon sources requires additional resources such 
as local entangling gates [23| or entangled ancillas in or- 
der to become deterministic. 

The concrete setup that we consider in this paper has 
recently been introduced by Lim et al. |43j and allows for 
the more efficient implementation of universal two-qubit 
gates than previous proposals. The presented scheme 
consists of a network of single stationary qubits (like 
trapped atoms, molecules, ions, quantum dots and nitro- 
gen vacancy color centers) inside optical cavities, which 
act as a source for the generation of single photons on 
demand. Read-out measurements and single qubit rota- 
tions can be performed on the stationary qubits using 
laser pulses and standard quantum optics techniques as 
employed in the recent ion trap experiments in Innsbruck 
and Boulder HH. 

The main building block for the realization of a two- 
qubit gate, which qualifies the setup for universal quan- 
tum computing, is shown in Figure ^ It requires the 
simultaneous generation of a photon in each source in- 
volved in the operation. Afterwards the photons should 
pass through a linear optics setup, where a pair measure- 
ment is performed in the output ports. This photon pair 
measurement results either in the completion of the gate 
or indicates the presence of the original qubits. In the 
later event, the gate should be repeated. The qubits are 
never lost in the computation and the presented scheme 
has therefore been called Repeat- Until- Success quantum 
computing [43l |. 

Under realistic conditions, i.e. in the presence of finite 
detector efficiencies and finite success rates for the gener- 
ation of a single photon on demand, the setup in Figure 
1 can still be used for the implementation of probabilis- 
tic gates with a very high fidelity. As shown recently 



by Barrett and Kok 01 1 it is possible to use probabilis- 
tic gates to efficiently generate graph states for one-way 
quantum computing [ll|. Both schemes, 01 ^"^^ 
overcome the limitations to scalable quantum compu ting 
faced before when using the same resources. In Ref. |43| 
this is achieved with an eventually deterministic gate. 
Ref. introduced a so-called double-heralding scheme, 
in which the entangling photo-detection stage was em- 
ployed twice to eliminate unwanted separable contribu- 
tions to the density matrix. 

In this paper, \ye combine the ideas presented in our 
previous work [1^ |4^ . In this way, we obtain a truly 
scalable design for quantum computing, i.e. even in the 
presence of imperfect components, with several key ad- 
vantages: 

1. Since our system uses no direct qubit-qubit interac- 
tions, the qubits can be well isolated. Not only does 
this allow us to address the individual qubits eas- 
ily, it also means that there are fewer decoherence 
channels and hence fewer errors in the computa- 
tion. 

2. We achieve robustness to photon loss. In the pres- 
ence of photon loss, the two qubit gates become 
non-deterministic. However, the gate failures are 
heralded, and so the gates can still be used to 
build high-fidelity entangled states, albeit in a 
non-deterministic manner. Photon loss thus in- 
creases the overall overhead cost associated with 
the scheme, but does not directly reduce the fidelity 
of the computation. When realistic photo-detectors 
and optical elements are used, photon loss is in- 
evitable and this built-in robustness is essential. 

3. Our scheme largely relies only on components that 
have been demonstrated in experiments like atom- 
photon entanglement [45l . l46j |. Apart from lin- 
ear optics, we require only relatively good sources 
for the generation of single photons on demand 
mmiSElEl, preferrably at a high rate [13, 
and relatively efficient but not necessarily number 
resolving photon detectors jsl]. Combining these 
in a working quantum computer will be challeng- 
ing, but the basic physics has been shown to be 
correct. 

4. The photon pair measurement is interferometrically 
stable. Since each generated photon contributes 
equally to the detection of a photon in the linear 
optics setup, fluctuations in the length between the 
photon source and the detectors can at most result 
in an overall phase factor with no physical conse- 
quences. This constitutes a significant advantage 
compared to previous schemes based on one-photon 
measurements (the only interferometrically stable 
schemes are |3lElElE3)j since the photons do 
not need to arrive simultaneously in the detectors 
as long as they overlap within their coherence time 
in the setup. 
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5. The basic ideas presented in this paper are imple- 
mentation independent and the stationary qubits 
can be reahsed in a variety of ways. Any system 
with the right energy-level structure and able to 
produce encoded flying qubits may be used. 

6. Our scheme is inherently distributed. Hence, it 
can be used in applications which integrate both 
quantum computation and quantum communica- 
tion. We show that entanglement can be generated 
directly between any two stationary qubits in the 
physical quantum computer. This significantly re- 
duces the computational cost compared to architec- 
tures involving only nearest-neighbor interactions 
between the qubits [H^ . 

This paper is organized as follows. In the next Sec- 
tion, we give an overview on the basic principles of 
measurement-based quantum computing, since the de- 
scribed hybrid approach to quantum computing consti- 
tutes a novel implementation of these ideas. Section III 
details the general principle of a remote two-qubit gate 
implementation. In Section llVI we discuss possible gate 
implementations with polarization and time-bin encoded 
photons. In Scction[V] we describe how to overcome im- 
perfections of inefficient photon generation and detection 
with the help of pre-fabricated graph states. Finally, we 
state our conclusions in Section IVll 

II. MEASUREMENT-BASED QUANTUM 
COMPUTING 

One condition for the successful implementation of a 
measurement-based quantum gate is that the measure- 
ment outcome is mutually unbiased ^55^ with respect to 
the computational basis. In this way, an observer does 
not learn anything about the state of the qubits and the 
information might remain stored inside the computer. To 
avoid the destruction of qubits, it is not allowed to mea- 
sure on the qubits directly. Measurements should only be 
performed on ancillas, which have interacted and there- 
fore share entanglement with the qubits. These ancillas 
can be of the sarne physical realisation as the computa- 
tional qubits m El m El but they might also be re- 
alised differently. If the stationary qubits are atoms, the 
ancilla can be the quantised field mode inside an opti- 
cal cavity |59j| , a common vibrational mode |6C| or newly 
generated photons, as in the setup considered here. Vice 
versa, it has been found advantageous to use collective 
atomic states as ancillas for photonic qubits [sills^ . 

Let us now briefly describe the principles of 
measurement-based quantum computing in a more for- 
mal way. Using the terms 'qubits' and 'ancillas' provides 
a convenient picture, which is especially suited for the 
description of hybrid approaches, where the qubits may 
remain encoded in the same physical qubits instead of 
being assigned dynamically as the computation proceeds. 
As in Ref. [Blj . we consider two systems, s and a, that 



are initially in the state (c„ G C) 

|«'),|ylo)a = ^C„|V'„)s<8)|Ao)a. (1) 
n 

After some interaction, the joint system evolves into 

n 

where the \An)a are the eigenstates of an observable A. 
We can then measure A, which will reveal the state of 
the system s. This can be interpreted as a quantum non- 
demolition measurement of s but this is not what we are 
interested in here. 

In this article we will instead consider measurements 
of an observable B, as shown in Figure El that is comple- 
mentary to A. In other words, the eigenvectors of A and 
B form a so-called mutually unbiased basis of the Hilbert 
space of system a. A specific outcome labelled k of such 
a measurement corresponds to the application of the pro- 
jection operator (associated with the k^^ eigenvector 
of B), and the state of system s is then given by 
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Tr^a 







This can be generalized to situations where B^, is a multi- 
rank projector or a Positive Operator Valued Measure 
(POVM). The conditions for the evolution \tpn)s \'^k)s 
to be a unitary transformation on system s are presented 
in Lapaire et al. [6ll | . If s describes the qubits and a the 
ancilla, they guarantee, as mentioned above, that the 
detection of Bk does not reveal any information about 
the qubits. 

Especially, in the setup considered in this paper the 
system s consists of a set of N stationary qubits occu- 
pying a Hilbert space of size 2^, and system a consists 
of N fiying quantum systems occupying a Hilbert space 
of dimension d > 2^ . A measurement of the observ- 
able B on the flying qubits will result in a multi-qubit 
(entangling) operation on the stationary qubits. We are 
interested in the case where the projector Bk induces a 
unitary transformation on the stationary qubits, 

\Tk)s = Uk\^)s, (4) 

which means that 13^ is a proper projector. There are 
two interesting cases to consider: 

1. The set {I3k}a corresponds to a basis of states that 
induces a complete set {Uk}a of entangling quan- 
tum gates. As a result, finding any measurement 
outcome k will induce a unitary entangling gate 
operation on the stationary qubits. 

2. The set {Bk}a corresponds to a basis that can be 
divided into two sets of states: Some of the projec- 
tors will induce a unitary entangling gate Uk on the 



4 



Input qubits 



Il/',n> 



Outpu t qubits 



Ancillary qubits 



Measurements 



FIG. 2: Measurement-based quantum computing. The input 
state |*I')s and the auxiliary state |Ao)a are transformed in an 
A''-port that induces a unitary transformation Usf- Given a 
detector outcome corresponding to a POVM Bt, the output 
state is |Tfe)s. 



stationary qubits, while the remaining projectors 
induce a transformation that is locally equivalent 
to the identity map 1. 

The second setup is interesting for the following reason: 
Suppose that system s consists of non-interacting (e.g., 
well-separated) stationary qubits with long decoherence 
times. If this system can generate flying qubits in the 
manner described above, we can perform a measurement 
of the observable B and entangle the non-interacting sta- 
tionary qubits. When not all measurement outcomes pro- 
duce an entangling gate on the stationary qubits (some 
yield instead the identity operator) , then the unitary gate 
is applied only part of the time. However, due to the fact 
that a gate failure corresponds to an identity operation 
(or something locally equivalent), we can again prepare 
the flying qubits in the state |Ao)o. This allows us to 
repeat the protocol until the entangling gate is applied 
successfully, which is why we called this idea Repeat- 
Until-Success quantum computing |4^ . 



III. REMOTE TWO-QUBIT PHASE GATES 

One of the requirements for universal quantum comput- 
ing is the ability to perform an entangling two-qubit gate 
operation, like a controlled phase gate [621 ■ In this Sec- 
tion we describe the general concept for the implemen- 
tation of this gate between two distant single photon 
sources. Note that our method of distributed quantum 
computing allows to realize entangling operations, since 
the measurement on a photon pair can imprint a phase 
on the state of its sources although it cannot change the 
distribution of their populations. The first step for the 
implementation of a two-qubit gate is the generation of a 
photon within each respective source, which encodes the 
information of the stationary qubit. 



A. Encoding 

Let us denote the states of the photon sources, which 
encode the logical qubits |0)l and as |0) and |1), 



respectively. An arbitrary pure state of two stationary 
qubits can then be written as 



IV'in) = a|00)-K/3|01)+7|10)-f (5|11) 



(5) 



where a, /?, 7 and S are complex coefficients with 
|aP + + I7P + = 1. Suppose that a photon is 
generated in each of the two sources, whose state (i.e. its 
polarization or generation time) depends on the state of 
the respective source. In the following we assume that 
source 1 prepared in \i) leads to the creation of one pho- 
ton in state jx^), while source 2 prepared in \i) leads to 
the creation of one photon in state jy^). 



W2 



\hyi)2 



(6) 



The simultaneous creation of a photon in both sources 
then transfers the initial state (|3J) into 



\Anc) = a|00,Xoyo) +/3|01,xoyi) +7|10,xiyo) 



h(5|ll,xiyi 



(7) 



Note that the generation of photons whose state depends 
on the states of the stationary qubits is a highly non- 
linear process. The preparation of the generally entan- 
gled state ((TJ is indeed the key step which allows the 
completion of an eventually deterministic two-qubit gate 
with otherwise nothing else than linear optics and pho- 
ton pair measurements. The way the encoding step ® 
can be realized experimentally is discussed in Section llVl 
In this section we focus on the general ideas underlying 
Repeat-Until-Success quantum computing. 



B. Mutually Unbiased Basis 

Once the photons have been created, an entangling phase 
gate can be implemented by performing an absorbing 
measurement on the photon pair. Thereby, it is im- 
portant to choose the photon measurement such that 
none of the possible outcomes reveals any information 
about the coefficients a, 7 and 6, as mentioned in 
Section II. This can be achieved with a photon pair 
measurements in a basis mutually unbiased js^ l with 
respect to the computational basis given by the states 
{IxoYo), IxoVi), IxiYo), IxiYi)}. More concretely, all pos- 
sible outcomes of the photon measurement should be of 
the form 



I'i') = MlxoYo) + e''^^ IxoYi) 



|xiYo) 



|xiYi)] 



(8) 

As we see below, a complete set of basis states of this 
form can be found. Any bias in the amplitudes would 
yield information about a, (3, 7, and S, and would there- 
fore not induce a unitary gate on the stationary qubits. 
Detecting the state ^ and absorbing the two photons in 
the process transfers the encoded state into 



l^out) = a|00)+e-''^i/3|01) 



^7|10) 



(9) 
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Note that the output state Q differs from the initial 
state (O by a two-qubit phase gate. 
Let us now consider the angle 

'PS.= (10) 

In this case, the state |$) is a product state and the 
output lO differs from the initial state © only by local 
operations. However, if 

V'a = V'l + ^2 + 71" , (11) 

the state ^ becomes a maximally entangled state, as it 
becomes obvious when writing |<i>) as 

1^) = M|xo)(|yo) +c"^^ |yi)) +0*^^^ |xi)(|yo) -c'^^ |yi))] . 

(12) 

The detection of a photon pair in this maximally entan- 
gled state results in the completion of a phase gate with 
maximum entangling power on the stationary qubit. Vice 
versa, maximum entanglement of the state (jHJ also auto- 
matically implies Eq. as one can show by calculating 
the entanglement of formation of the state ||SJ). 

C. A deterministic gate 

In the following, we denote the states of the measurement 
basis, i.e. the mutually unbiased basis, by {I'I'i)}. In 



order to find a complete Bell basis with all states of form 
(IHl), we define 







+ |a2b2 


$2) 




- |a2b2 






+ |a2bi 


$4) 




- |a2bi 



)] , (13) 



where the states ja^) describe photon 1 and the |b,;) de- 
scribe photon 2. Assuming orthogonality, i.e. (ai|a2) = 
and (bi|b2) = 0, one can write the photon states on the 
right hand side of Eq. (|13|) without loss of generality as 

|ai) = ci\xo) + e'^^ si\xi) , 

|a2) - e-'«i(e-'''isi|xo)-ci|xi)), 

|bi) = c2|yo)+e'''^s2|yi), 

lbs) = e-'«He-"'^S2|yo)-C2|yi)) (14) 

with 

Si = sin0i, Ci = cos9i. (15) 
Inserting this into Eq. we find 



|<i>i) = ^ [(ciC2 + e-'(''^+''^)e-'«^+«^)siS2) |xoyo) + (e'-'^CiSs - e-"'^e-'(«^+€^)siC2) |xoyi) 

+ (e'''^ S1C2 - e-'''^e-'(«i+«^)ciS2) |xiyo) + (e'^'^i+^'^^sisz + e-'^^'+^^-'^ C1C2) |xiyi)] , 
|<i>2> = ^ [(ciC2 - e-'(''^+''^)e-'(«i+«^)siS2) |xoyo) + (e'-'^ciss + e-"'^e-'(«^+«^)siC2) |xoyi) 

+ (e'^^ S1C2 -f e-'''^e-'(«i+«^)ciS2) |xiyo> + (e'^^^+^^'sisz - e-'(«i+«^'ciC2) |xiyi)] , 
|<i>3) = ^[(e-"'^e-'«^ciS2 + e-'''^e-'«isiC2)|xoyo) - (e-'«=ciC2 - e-'(''^-''^)e-'«isiS2) |xoyi> 

+ (e'(''i-''^)e-'«^siS2 - e-'«iciC2)|xiyo> - (e"'ie-'«=siC2 + e'^^e-'^^ciss) |xiyi)] , 
|ci>4) = _i.[(e-"'^e~'«=ciS2-e-'''ie-'«^siC2)|xoyo) - (e-'«^ciC2 + e-'(''^-''^)e-'«^5iS2) |xoyi) 

+ (e^(^^-^-)e--^i-siS2 + e-'«iciC2)|xiyo> - (e'''ie-'«=siC2 - e'-'^e-'^iciss) |xiyi)] . 



These states are of the form 0, if the amplitudes are all 
of the same size, which yields the conditions 

|ciC2±e-'(^i+*^+«i+«^)siS2| 

= |ciS2 ± e-(''^+^^+«^+«^)siC2| = ^ , (17) 

and 

|ciS2±e-'(''i-^=+«i-«^)siC2| 

= |ciC2±e-'(''i-''^+«i-«^)si52| = ^. (18) 



The only solution of the constraints p7|l and (|18|l is 



cos(26'i) cos(26'2) = cos(i?i ± i?2 + 6 ± 6) = (19) 



provided that neither cos(26'i) nor cos(202) equals 1. In 
the special case, where either cos(26'i) = 1 or cos(26'2) — 
1, condition (|19|l simplifies to cos(26'i) cos(202) = with 
no restrictions in the angles 'i?2, ^1 and ^2- 
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One particular way to fulfill the restrictions H19|l is to 
set 

6 - -iTT , a = 'Ji = = and 01 = 02 = , (20) 
which corresponds to the choice (c.f. 43]) 
|ai) = ;i3(|xo)+ |xi)), 
|a2) = ^(|xo)- |xi)), 
|bi) - -)=(|y„) + |yi)), 
|b2) = ^(|yo>-|yi» (21) 

and yields 

1$!) = ie'^/4[|xoyo) - ilxoYi) - i|xiyo) + |xiyi)] , 

= ie--/4[|xoyo) + i|xoyi) + i|xiyo) + |xiyi)] , 

|<i>3) = ie-/'[|xoyo)-i|xoyi)+i|xiyo)-|xiyi)], 

1*4) = -5e-'^/4[|xoyo) + i|xoyi) - i|xiyo) - |xiyi)] . 

(22) 

To find out which gate operation the detection of the 
corresponding maximally entangled states combined 
with a subsequent absorption of the photon pair results 
into, we write the input state as 

4 

i 

and determine the states {ipi) of the stationary qubits. 
Using the notation 

Ucz = |00)(00| + |01)(01| + |10)(10|-|11)(11| (24) 

for the controlled two-qubit phase gate (the CZ gate) and 
the notation 

Z,{^) = |0)ii(0|+e-'^|l)ii(l| (25) 

for the local controUed-Z gate on photon source i [6^ , we 
find 

IV-i) = exp(-ii7r)Z2(-i7r)Zi(-i7r)i7cz|V'm), 
|7/;2) = exp (iiTr) Z2(i7r) Zi(i7r) J/cz IV'in) , 
\i>3) = exp(-ii7r)Z2(-i^)Zi(i7r);7cz|^i„), 
IV'4) = -exp (iivr) Z2(i7r) Zi( - ivr) C/cz iV'in) • 

(26) 

From this we see that one can indeed obtain the CZ gate 
operation (|24fl up to local unitary operations upon the 
detection of any of the four Bell states as it has 

been pointed out already by Protsenko et al. . 

D. Repeat-Until-Success quantum computing 

When implementing distributed quantum computing 
with photons as flying qubits, the problem arises that 



it is impossible to perform a complete deterministic Bell 
measurement on the photons using only linear optics el- 
ements. As it has been shown 64], in the best case, 
one can distinguish two of the four Bell states. Since 
the construction of efficient non-linear optical elements 
remains experimentally challenging, the above described 
phase gate could therefore be operated at most with suc- 
cess rate i. 

What must be done to solve this problem is to choose 
the photon pair measurement basis such that two 

of the basis states are maximally entangled while the 
other two basis states are product states. Most impor- 
tantly, all basis states must be mutually unbiased with 
respect to the computational basis and information will 
not be destroyed at any stage of the computation. In the 
following we choose ]<i>3) and ]<i>4) as in Eq. H13|) and ]<l>i) 
and ]$2) as product states such that 

= Jaibi), I$2) = la2b2), 
1$3) ^ -i=[laib2) + la2bi)], 

l$4) ^ ^[Iaib2)-la2bi)]. (27) 

The aim of this is (see Section that in the event of 
the "failure" of the gate implementation (i.e. in case of 
the detection of ]$i) or l<f>2)) the system remains, up 
to a local phase gate, in the original qubit state. This 
means that the initial state © can be restored and the 
described protocol can be repeated, thereby eventually 
resulting in the performance of the universal controlled 
phase gate (|24|l . The probability for the realization of 
the gate operation within one step equals ^ and the final 
completion of a quantum phase gate therefore requires 
on average two repetitions of the above described photon 
pair generation and detection process. 

Let us now determine the conditions under which the 
states are of the form |(SJ). Proceeding as above, 

we find that the angles lii, £,i and 9i in Eq. H14|l should 
fulfill, for example, Eq. (|20|l . In analogy to Eqs. 117() and 
((TS|l . we find that j'I'i) and l<f>2) are mutually unbiased, 
if 

|ciC2| = |ciS2| = |siC2| = \siS2\ = \ , (28) 

which also holds for the parameter choice in Eq. H2U|I . 
Using Eq. H21|l , one can easily verify that with the above 
choice the basis H27|l becomes 

l*i> = 5[|xoyo> + jxoyi) + Jxiyo) + Jxiyi)] , 
1*2) = ^[Jxoyo) - jxoyi) - JxiYo) + JxiYi)] , 

1$4) = -K"^^[|xoyo)+i|xoyi)-ilxiyo>-lxiyi)]. 

(29) 

Choosing the states Ja^) and Jbi) as in Eq. allows to 
implement the gate operation (|24|l eventually determin- 
istically. 

Finally, we determine the gate operations correspond- 
ing to the detection of a certain measurement outcome 
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To do this, we decompose the input state lO again 
into a state of the form H23|l . Proceeding as in the previ- 
ous subsection, we find 

IV'l) = IV-in) , 

IV'2) = -i^2(7r) 2'2(7r) |?Ain) , 

IV-a) = exp(-ii^)Z2(-i7r)Zi(i^)C/cz|V'in), 

|V'4> = -exp (iiTr) Z2(i7r) Zi( - iyr) C/cz IV'in) • 

(30) 

Again one obtains the CZ gate operation (|24|l up to local 
unitary operations upon the detection of either [$3) or 
I $4) . In the event of the detection of the product states 
|$i) or I $2), the initial state can be restored with the 
help of one-qubit phase gates, which then allows us to 
repeat the operation until success. 

It should be emphasized that there are other possi- 
ble encodings that yield a universal two-qubit phase gate 
upon the detection of a Bell-state, but where the original 
state is destroyed upon the detection of a product state 
(see e.g. This happens when the product states 

are not mutually unbiased and their detection erases the 
qubit states in the respective photon sources. To achieve 
the effect of an insurance against failure, the encoding 
© should be chosen as described in this Section. 



IV. POSSIBLE EXPERIMENTAL 
REALIZATIONS 




qubit 




FIG. 3: Schematic view of a single photon (a) polarization 
encoder, (b) time-bin encoder and level configuration of the 
source containing the qubit. 



Polarization encoding. Suppose, the photon source 
contains an atomic double A level configuration as shown 
in Figure |3Ia) (see also Ref. l6d|). A single photon can 
then be created by simultaneously applying a laser pulse 
with increasing Rabi frequency to the O-cq transition and 
the 1-ei transition of the atomic system. Thereby, the 
atom goes to the ground state \vo) and \vi), respectively, 
depending on whether its initial state equalled |0) or |1) 
due to the coupling of the eo-wo transition and the ei- 
vi transition to the cavity mode. It has been shown in 
the past that this technique ,6Q] is very well suited to 
place exactly one excitation into the field of an optical 
resonator, from where it can leak out [47|. 

If the two transitions, cq-vq and ei-ui, couple to the 
two different polarisation modes h and v, in the cavity 
field, the photon generation results effectively, for exam- 
ple, in the operation 



|0). ^ |0,h). 



1 



|l,v) 



(31) 



Possible experimental realizations of the above described 
eventually deterministic quantum phase gate consist of 
two basic steps. Firstly, the information of the stationary 
qubits involved in the operation has to be redundantly 
encoded in the states of two newly generated ancilla pho- 
tons. Afterwards, a measurement is performed on the 
photon pair resulting with probability ^ in the desired 
gate operation. Depending on the type of the photon 
source, one can choose different types of encoding. There 
are also different possibilities how to perform the photon 
pair measurement. Examples are given below. 



once atom i has been repumped into its initial state |0)i 
and \ respectively. Finally we remark that the encod- 
ing does not affect the coefficients a, f3, 7 and S of the 
initial state (O . As long as no measurement is performed 
on the system, all coherences are preserved. 

Time-bin encoding. Alternatively, if the photon 
sources possess a level structure like the one shown in 
FigurelHIb), one can redundantly encode the information 
contained in the qubits into time bin encoded photons, 

|0), ^|0,E),, ^|1,L),. (32) 



A. Redundant encoding 

In order to obtain robust qubits, the states |0) and |1) 
should be two different longliving ground states of the 
single photon source. Each photon source carries one 
qubit. Depending on its level structure (see Figure |2Jl, it 
might be advantageous to realise the encoding step ((Tj) 
either by generating photons with different polarisations 
(polarisation encoding) or photons that agree in all de- 
grees of freedom apart from their creation time (time bin 
encoding). Note that different encodings can easily be 
transformed into each other using linear optics elements 
like a polarising beam splitters and delaying photons in 
time. 



This encoding is simpler and may therefore find realiza- 
tions not only in atoms but also in quantum dots and 
nitrogen vacancy color centers. In Eq. (|32|) . |E) and |L) 
denote a single photon generated at an early and a later 
time, respectively. The above operation can be achieved 
by first coupling a laser field with increasing Rabi fre- 
quency to the 1 — ei transition, while the cavity mode 
couples to the ei — vi transition. Once the excitation has 
been placed into the cavity mode and leaked out through 
the outcoupling mirror, the atom can be repumped into 
|0). Afterwards, one should swap the states |0) and |1) 
and repeat the process. This results in the generation of 
a late photon, if the system was initially prepared in |1). 
To complete the encoding, the states |0) and |1) have to 
be swapped again. 
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B. Photon pair measurement 

We now give two examples how to perform a photon pair 
measurement of the mutually unbiased basis H29|) . The 
first method is suitable for polarization encoded pho- 
tons, the second one for dual-rail encoded photons. If 
the qubits have initially been time bin-encoded, their en- 
coding should be transformed first using standard linear 
optics techniques. 

Polarization encoding. It is well known that sending 
two polarization encoded photons through the different 
input ports of a 50:50 beam splitter together with polar- 
ization sensitive measurements in the |h)/|v)-basis in the 
output ports would result in a measurement of the states 
-^(|hv) ± |vh)), |hh) and |vv). To measure the states (|27|l . 

we therefore propose to proceed as shown in Figure 0Ja) 
|43| and to perform the mapping 



C/i = |h)(ai| + |v)(a2| 

U2 = |h)(bi| + |v)(b2| 



(33) 



on the photon coming from source i. Using Eq. H21|l . we 
see that this corresponds to the single qubit rotations 



Ui = 75 [Ih>((h| + (v|) 
U2 = ^[|h>((h| + (v|) 



|v)((h|-(v|)] 
i|v)((h|-(v|): 



(34) 



After leaving the beam splitter, the photons should be 
detected in the |h)/|v)-basis. A detection of two h and 
two V polarized photons indicates a measurement of |<I>i) 
and I $2), respectively. Finding two photons of different 
polarization in the same or in different detectors corre- 
sponds to a detection of |$3) or |<I'4). 

Dual-rail encoding. Alternatively, one can redirect the 
generated photons to the different input ports of a 4 x 4 
Bell multiport beam splitter as shown in Figure EJb). If 
aj; and 6jj denotes the creation operator for a photon in 
input and output port n, respectively, the effect of the 
multiport can be summarized as [6^ 



(35) 



(a) 



. BS 



(b) 



Bell 

multiport - » 
beamsplitter 



FIG. 4: Linear optics networks for the realization of a mea- 
surement of the basis states (I13II after encoding the photonic 
qubits in the polarization degrees of two photons (a) or into 
four different spatial photon modes (b) involving either a 
beam splitter or a 4 x 4 Bell multiport beam splitter. 



This conversion should be realized such that the photons 
enter the multiport at the same time. Using Eq. H35|) one 
can show that the network transfers the basis states 129|) 
according to 



l$i) 
1*2) 
1*3) 
1*4) 



t2 



a 2 



)h 

kt2N 



vac) 



V2 



blbl) 



vac) 



V2 



(38) 



Finally, detectors measure the presence of photons in 
each of the possible output ports. The detection of two 
photons in the same output port, namely in 1 or 3 and 
in 2 or 4, corresponds to a measurement of the state 
and I $2), respectively. The detection of a photon in ports 
1 and 4 or in 2 and 3 indicates a measurement of the state 
I $3), while a photon in the ports 1 and 2 or in 3 and 4 
indicates the state |$4). 

Any unknown fixed (or slowly varying with respect to 
the coherence length of the photon pulse) phase factor in- 
troduced along the photon paths contributes at most to 
a global phase factor to the input state l|71 l. which is also 
a feature of the schemes outlined in Refs. |36l 133 . l3^ lisf . 
The implementation of Repeat-Until-Success quantum 
computing therefore does not require interferometric sta- 
bility. It requires only overlapping of the photons within 
their coherence length within the linear optics setup. 



with 



Umn = \ exp(i7r(n - l)(m - 1)) 



(36) 



A Bell multiport redirects each incoming photon with 
equal probability to any of the possible output ports, 
thereby erasing the which-way information of the incom- 
ing photons. One way to measure in the mutually unbi- 
ased basis (|29|l is to direct the |xo) photon from source 1 
to input port 1, the |xi) photon from source 1 to input 
port 3 and to direct the |yo) photon and the |yi) pho- 
ton from source 2 to input port 2 and 4, respectively. If 
|vac) denotes the state with no photons in the setup, this 
results in the conversion 



|xoyo) a\al |vac) , |xoyi> 



Ixiyo) 



a\a\ I vac) 



|xiyi; 



a\a\ I vac) 
a\a\ I vac) 



(37) 



V. SCALABLE QUANTUM COMPUTATION IN 
THE PRESENCE OF INEFFICIENT PHOTON 
GENERATION AND DETECTION 

In this section, we discuss the possibility of implementing 
scalable quantum computation using the Repeat-Until- 
Success quantum gate described in the previous sections. 
The implementation of this gate requires the generation 
of single photons on demand and linear optical elements 
together with absorbing quantum measurements. In the 
limit of perfect photon emission, collection, and detection 
efficiency, two-qubit CZ gates can be performed deter- 
ministically, as described above. In real systems however, 
photon emission, collection, and detection is not perfect 
68]. In existing experiments, all of these processes have 
significant inefficiencies, which means that there is a fi- 
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nite probability that two photons will not be observed 
in the photon measurement. The failure to observe two 
photons in an attempted CZ operation means that the 
static qubits are left in an unknown state, which con- 
stitutes a correlated two qubit error. If such losses are 
sufBciently small (e.g. less than ^ 10^^), the resulting 
gate failures can be dealt with using existing fault tol- 
erance techniques _69, 70]. Recently, much higher fault 
tolerance levels of up to 50% were found in linear optical 
quantum computing |^ [t^I . 

More concretely, the highest reported photon detection 
efficiency for single photon detection with photon num- 
ber resolution is about 88% [13, E^- ^ recent experiment 
by McKeever et al. 49] involving an atom-cavity system 
for the generation of single photons yields a photon gen- 
eration efficiency of nearly 70%, limited only by passive 
cavity loss. The lifetime of the atom in the cavity was 
0.14s, allowing for as many as 1.4 • lO^photon genera- 
tion events. Moreover, Legero et al. [2J] demonstrated 
perfect time-resolved interference with two photons of 
different frequencies. Time-resolved detection acts as a 
temporal filter to erase the which- way information which 
is important to any scheme involving photon interference. 
This suggests that strictly identical single photon sources 
are not required for attaining high fidelities in the state 
preparation. The cost of this high fidelity is a lower prob- 
ability of success. 

Fortunately, scalable quantum computing is possible, 
even in the presence of large errors, as long as no errors 
imply a very high fidelity and the occurrence of an error 
is heralded: if fewer than two photons are detected, we 
know that the attempted CZ operation has failed. Only 
when the detectors have a substantial amount of dark 
counts, we cannot rely on this error detection mecha- 
nism. However, comercially available silicon avalanche 
photodetectors are available with a detection efficiency 
of 65%, and a dark count rate of Tdc < 25 s~^ [t^. As- 
suming, a photon regeneration rate of 105 s""'^ gives a 
clock time of 10~^ s. The total dark count probability is 
then pdc ~ lO"'^ per clock cycle, which is small enough to 
be dealt with using existing error correction techniques. 
Moreover, if one could experiment with detectors like the 
one reported by Rosenberg et al. , dark count rate ef- 
fects would be negligible. 

In the case of an error, the state of the static qubits 
can be determined by subsequently performing measure- 
ments on the sources, which allows the sources to be 
re-prepared in a known state. In earlier work, we have 
shown that scalable quantum computation can be per- 
formed in the presence of significant heralded error rates, 
by first using a non-deterministic entangling operation 
to create cluster states of many qubits l44j , and sub- 
sequently implementing scalable quantum computation 
via the 'one-way quantum computer' Given cluster 
states of many qubits, the one-way quantum computer 
can be implemented by single qubit measurements alone. 
This technique permits fully scalable quantum compu- 
tation, albeit with a fixed overhead per two qubit gate 
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FIG. 5: A rectangular lattice cluster state. Each circle rep- 
resents a physical qubit, and each line represents a 'bond' 
between qubits. These states are sufficient for simulating ar- 
bitrary logic networks [isll . with each horizontal row repre- 
senting a single logical qubit, and each vertical connection 
representing a two-qubit gate. Note we also permit bonds 
between non-adjacent rows and columns (not shown), which 
can simulate non-nearest neighbor two-qubit operations. 



in the algorithm, which we calculate below. We briefly 
review how one way quantum computing can proceed 
within our scheme, and then provide an estimate of the 
overhead costs involved. 



A. One way quantum computation 

One way quantum computation Tsl] proceeds by first cre- 
ating a graph state of many qubits, and subsequently per- 
forming sing le qubit measurements on the graph state 
[tgL Wa [73. Graph states may be represented as 
a graph comprising set of qubit 'nodes' connected by 
'edges' which may be understood as 'bonds' between 
the qubits. The quantum state corresponding to such 
a graph may be defined (and also implemented) by the 
following procedure: (i) prepare each qubit in the state 
]-H) = (]0) ll))/\/2, and then (h) for each bond in the 
corresponding graph, apply a deterministic CZ opera- 
tion (see Eq. I24|) between the relevant qubits. In this 
work, we will restrict our attention to the rectangular 
lattice graph states of the form shown in Figure |S1 (here- 
after referred to simply as cluster states), which are suf- 
ficient for simulating arbitrary logic networks, and hence 
universal quantum computations 115]. It is worth not- 
ing however that straightforward generalizations of the 
procedure described below allow us to scalably generate 
arbitrary graph states. This may be useful in that it 
might result in reduced costs for implementing certain 
algorithms. 

In these clusters, each horizontal row of physical qubits 
represents a single logical qubit in the logic network be- 
ing simulated. Two qubit operations are implemented by 
the vertical bonds acting between rows. We also permit 
bonds between non- adjacent rows, which permits highly 
non-local two qubit gates to be implemented. Note also 
that the location of the qubits within the cluster is no- 
tional, and need not correspond to the physical location 
of the static qubit (the mapping between the notional 
qubit positions within the cluster, and the actual phys- 
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ical location of the qubits can be stored in a classical 
computer). After making the state, quantum computa- 
tion proceeds by performing a sequence of single qubit 
measurements on the static qubits, with each measure- 
ment performed in a particular basis so as to im plem ent 
a given sequence of one- and two-qubit gates p^llfijl . At 
each time step, a whole column of physical qubits in the 
cluster is measured. The measurements are performed in 
order, starting with the column at left side of the cluster, 
and proceeding rightwards across the cluster. In general, 
the basis of the measurements made at a given time step 
will depend on the outcomes of earlier measurements. 
Once a physical qubit has been measured, that qubit is 
disentangled from the cluster state and so may be re- 
initialized in a particular state and subsequently used 
later in the computation. 

We assume that single-shot single qubit measurements 
and single qubit unitary operations on the static qubits 
can be implemented using standard techniques. Imple- 
menting one-way quantum computation in our scheme 
therefore reduces to the problem of scalably generating 
cluster states using the heralded, non-deterministic CZ 
operation. We outline the general procedure here, and 
give a more detailed description in the subsequent sec- 
tion. 

In our scheme, cluster states can be generated by at- 
tempting to bond qubits using the non-deterministic CZ 
operation. This operation has three possible outcomes: 
'success', 'insurance', or 'failure'. In the case of observing 
two photons, one of the gates of Ea. (|30|) is implemented, 
and subsequent application of appropriate single qubit 
unitaries implements either the CZ operation (denoting 
a 'success'), or the identity operation (denoting 'insur- 
ance'). In the case of insurance, the CZ operation can 
simply be reattempted. Observing fewer than two pho- 
tons denotes a failure. In this case, the static qubits 
are left in an unknown state. However, this damage can 
be repaired as follows. Firstly, each of the two qubits in- 
volved in the failed gate can be measured in the computa- 
tional basis to determine the nature of the error. If either 
qubit was already part of a cluster state, the bonds to its 
neighbors within the cluster are also destroyed. How- 
ever, the remainder of the cluster state can be recovered 
by applying appropriate single qubit unitary operations 
to these neighboring qubits, conditional on the outcome 
of the measurement on the qubit involved in the failed 
CZ gate. Therefore, the cluster state can grow, shrink, or 
remain the same size, depending whether the CZ opera- 
tion was successful, failed, or failed with insurance. The 
key to scalably generating cluster states is to attempt 
CZ operations between qubits in a sequence order such 
that the cluster state grows on average. We give such a 
sequence in Sec. IV Bl 

We conclude this section by noting that it is not nec- 
essary to build the whole cluster required for simulat- 
ing a particular algorithm before commencing the single 
qubit measurement part of the computation. It is pos- 
sible to build a partial cluster, and then to simultane- 
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FIG. 6: Dynamically growing clusters during a computation. 
The cluster contains three regions: the active region (M), at 
the left of the cluster, in which the logic gate networks are 
being simulated via single qubit measurements; the buffer re- 
gion; and the connection region, where new cluster fragments 
are added to the right edge of the main cluster. The connect- 
ing cluster chains have a buffer length La to accommodate 
the probabilistic entangling operation. 



ously perform single qubit measurements on one part of 
the cluster, while adding new qubits to another region in 
the cluster. In this approach to one-way quantum com- 
puting, one can think of the cluster as being split into 
three regions, as shown in Figure El The active region, 
to the left of the cluster, contains the part of the clus- 
ter where the logic gate networks are being simulated 
via single qubit measurements. At the right of the clus- 
ter, the connection region comprises of several horizon- 
tal dangling linear chains which extend from the right 
edge of the main cluster, each corresponding to a logi- 
cal qubit. In this region, nondeterministic CZ operations 
are applied in order to add further cluster sections to 
the main section. These additional sections are manu- 
factured separately, as described in Sec. IV Bl Between 
the active region and the connection region, the buffer 
region comprises a quiescent region which suffices to pro- 
tect the active region in the event of a long sequence of 
failed CZ operations; this would lead to the right edge of 
the cluster running back into the active region, damaging 
the logical computation. The depth of the buffer region 
should be chosen such that the probability of erasing a 
logical qubit is sufficiently small that it can be handled 
with existing fault tolerance techniques [6^ [t^ ■ 

There are several advantages to this approach. Firstly, 
fewer physical qubits are needed, because qubits that 
have already been measured at the left edge of the cluster 
can be recycled and added to the right hand side of the 
cluster. Secondly, preparing the whole cluster initially 
means that some of the qubits will spend a lot of time in 
an 'idle' state before they are involved in the computa- 
tion; any errors accumulated in these idle qubits due to 
decoherence will degrade the fidelity of the computation 
|l3l |. This is crucial if fault tolerant quantum compu- 
tation is to be implemented within the cluster model, 
as such schemes require a source of fresh ancilla qubits 
throughout the algorithm. Thirdly, the overhead costs 
for this approach can be reduced, because it is not neces- 
sary to prepare the whole cluster with a total success 
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probability close to one; the probability for erasing a 
given logical qubit need only be made smaller than the 
error threshold required for fault tolerance. 

B. Overhead costs 

A number of authors have considered efficient cluster 
state generation using non-deterministic, but heralded, 
Entangling Operations lEOs) El El iH El El 11 
Isi . 82J. References 0, 0, calculated explicit costs 
for making cluster states of optical qubits in the ideal 
case (i.e. neglecting photon loss). Subsequently, Bar- 
rett and Kok J4J showed that, in the case of hybrid 
matter-optical systems (such as those considered in this 
work), arbitrarily small EO success probabilities could 
be tolerated. They provided a 'divide and conquer' al- 
gorithm for building linear clusters, which has moderate 
costs even for small success probability. An efficient al- 
gorithm for building two dimensional clusters, capable 
of simulating arbitrary logic networks was also given in 
[4^. More recently, in Ref. (7^], a similar algorithm for 
building linear clusters was proposed, which made more 
use of recycling, and hence has a lower overhead cost. 
Ref. jZSi s-lso gives an alternative algorithm for making 
2-dimensional clusters, and explicitly calculates the as- 
sociated overhead costs. In Ref. j80|, some elegant cost 
reducing improvements to the scheme proposed in Ref. 
|44| were suggested, utilizing the redundantly encoded 
qubits inherent in the original scheme. 

In this work, we will combine elements of the ap- 
proaches taken in Refs. 0, IS EPi to provide a sim- 
ple upper bound for the scaling costs for building cluster 
states using our scheme. This estimate is based on an ex- 
plicit procedure, and we do not claim that it is optimal; 
an improved algorithm may yield substantially reduced 
costs. Nevertheless, the procedure given here allows a 
straightforward calculation of the overhead costs. De- 
spite its apparent similarity to Refs. ^1E3' there is a 
crucial difference: in the scheme under consideration in 
this paper, there is the possibility of obtaining the 'in- 
surance' outcome. In general, this leads to a reduction in 
costs relative to schemes in which there is no insurance 
outcome. 

In the presence of imperfect photon emission, detec- 
tion, and collection, the performance of the CZ operation 
can be characterized by three probabilities: 

• the probability of successfully implementing the CZ 
operation on the input qubits (up to local opera- 
tions), Ps] 

• the probability of obtaining the 'insurance' out- 
come in which known local operations are applied 
to the qubits, pf, 

• the probability of failure due to failing to emit, col- 
lect, or detect one or more photons during the re- 
mote gate operation, pf. 



These probabilities are determined by the physics of the 
sources and detectors. 

Calculating the total cost of growing cluster states can 
be simplified by noting that, in the case of obtaining the 
'insurance' outcome, after applying the necessary single 
qubit corrections, one simply attempts the gate opera- 
tion again. This process is repeated until a definite out- 
come (success or failure) is obtained. Thus, we can de- 
fine total success and failure probabilities, Ps and P/, of 
the corresponding definite outcomes after an (arbitrarily 
long) sequence of 'insurance' outcomes. These probabil- 
ities are given by Ps = J^'jLoPiPs = Ps/i^ - Pi) ^^d 

Pf = J^'jLoPiPf = -P//(l - Pi)- The average number 
of attempted CZ operations required before we obtain a 
definite outcome is A^av = 1/(1 — Pi)- 

The overhead cost for making cluster states is then 
found using similar calculations to those presented in 
Refs. ,4^_7£|. We first calculate the cost (i.e. the num- 
ber of attempted CZ operations per qubit in the final 
cluster) of generating linear clusters. If a CZ gate is 
repeatedly applied between the end qubits of two lin- 
ear chains, each of length L^, either the gate is (ul- 
timately) successful, in which case the total length of 
the new cluster is 2Lfe, or the gate (ultimately) fails, in 
which case, the length of the original clusters shrinks by 
one qubit each. Repeatedly applying this procedure un- 
til a successful outcome is obtained (or until both origi- 
nal clusters are destroyed) E3 gives the expected length 
Lk+i = Ef=o2(Lfc - i)PsP} « 2Lk - 2pf/ps. Denot- 
ing the average number of attempts to create a chain 
of length Lfc by Nk, we also have A^fe+i = 2Nk + l/ps- 
Solving these recursion relations gives a total cost 

where A^o denotes the cost of growing a short cluster of 
length Lq. Note that for the average cluster length to 
grow on each round of the protocol, we require Li > Lq, 
which implies that the length of the short chains should 
satisfy Lq > 2pf/ps. 

Chains of fixed length Lq can be grown independently 
using the probabilistic CZ operation, by joining sub- 
chains together. Growing these short chains adds a con- 
stant overhead cost to the cluster generation process. 
We use a 'divide and conquer' approach to making these 
short chains 44, 79], in which, on each round of the pro- 
tocol, we attempt to join equal length pairs of linear clus- 
ters using the probabilistic CZ operation. If we obtain 
the 'insurance' outcome on any such attempt, we try the 
operation again, whereas if we fail, we assume (for ease 
of calculation) that the short chains are discarded. On 
the fcth round of this protocol, the length of the chains is 
Ik = 2^ , and the number of attempted CZ operations is 
given by the recursion relation = 2nk^i/Ps + Ni^y/Pg. 
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FIG. 7: Creating vertical bonds, a) We start out with two 
sufficiently long cluster chains, and we wish to create a vertical 
bond between the two qubits on the left, b) We apply a 
measurement to the two adjacent qubits and a Hadamard 
operation H on the next, c) This will result in a redundant 
encoding of the qubits we wish to bond together, d) Applying 
the entangling operation to the dangling "cherries" will create 
the vertical bond. Note that we also removed the qubits in the 
vertical bond by applying another measurement, resulting 
in another redundant encoding. If this procedure fails, we are 
left with a shorter chain, and we can try to create a vertical 
bond again. 



Solving these relations gives 



No{Lo) = N,. 



log2 Lo 

E 



pi 



(40) 



Combining Eq. H4U|) and Eq. (|39|1 . one can calculate 
the total cost of growing linear clusters for given values 
of pf, Ps and Pi- For instance, taking pf = 0.6, Pi = 
Ps = 0.2, we require Lq > 6. Taking Lq — 2^ — 8, the 
total cost for making a linear cluster of length L is found 
to be N{L) = 185i — 1115 attempted CZ operations. A 
moderate increase in success probability can dramatically 
decrease the cost: taking Pf — 0.4, pi = p^ — 0.3, we 
Lo > 2.67, and taking Lo ^ 2^ ~ 4, we find 
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Note that the 



require Lo 

the total cost to be N{L) = W'jL 
negative constant term in these expressions is an artefact 
of joining small numbers of chains together to make an 
isolated chain of length L. This is an 'edge effect' which 
should be neglected when considering the asymptotic cost 
of making long chains. 

Linear clusters are not sufficient for simulating arbi- 
trary logic networks js^, and therefore it is necessary 
to generate more general graph states. A variety of 
techniques for making such states using probabilistic en- 
tangling operations have been proposed, which include 
linking linear clusters using independentl y p repared T 
shaped clusters |43| , using micro-clusters Tff] , using re- 
dundantly encoded qubits 16], or by making use of '-f ' 
shaped clusters 1^^. Here, we propose a relatively effi- 
cient method for creating vertical bonds between linear 
cluster chains. 

We employ a technique based on that introduced by 
Browne and Rudolph 16j, which involves four steps as 



TABLE I: The average number of entangling operations per 
vertical bond, given by A^bond = 2N{M) + {l—pi)/ps. Hereps, 
Pf and Pi are the success, failure and insurance probabilities, 
respectively. Lq — 2" is the length of the chain that is needed 
to obey the growth requirement, and A'o is the number of EOs 
needed to achieve this length. M is the average cluster chain 
consumed by the forging of a vertical bond, and N{M) is the 
number of EOs needed to achieve this length. 



Ps 


Pf 


P^ 


Lo 


No 


M 


N{M) 


Abond 


0.2 


0.6 


0.2 


2^ = 8 


365 


9 


185M 


3334 


0.3 
0.4 


0.4 
0.2 


0.3 
0.4 


2^ = 4 
2^ = 2 


18| 
2i 


3 


16|M 
5M 


191| 
32 1 


0.5 


0.5 





2^ = 4 


10 


5 


6M 


62 



shown in Figured 

a) First, we assume that we have sufficiently long lin- 
ear cluster chains. These can be produced effi- 
ciently in the manner outlined above. In order to 
establish the amount of resources needed to create 
a vertical bond, we will count the number of qubits 
that are utilized on average in this process, as well 
as the average number of entangling operations. 

b) Secondly, we identify the two qubits that we wish 
to entangle with a vertical bond (in Figure |7| the 
two left- most qubits). The qubits directly on the 
right of these qubits are then measured in the (Tx 
basis. A Hadamard operation on the third qubit in 
each chain returns the overal state to a graph state. 

c) This will result dangling bonds, or cherries [s^ 
hanging from the two qubits that are to be con- 
nected. This is a form of redundant encoding, and 
it allows us to apply the entangling operation to the 
two cherries. In case of a failure, the entangling op- 
eration will not break the linear cluster chains. It 
will destroy only the cherries and as a result both 
chains are shortened by two qubits. Steps (b) and 
(c) can then be repeated. 

d) When the entangling operation succeeds, we have 
forged a vertical bond between the two qubits cho- 
sen in step a) . The vertical link is itself a chain of 
two qubits. These are typically not wanted, so we 
can remove one of them with a measurement, 
creating another cherry in the other qubit in the 
chain. This redundancy can be pruned, but may 
also be useful for creating additional bonds, or may 
even be useful for error correction. 

We will now estimate the cost of this procedure. Since 
two qubits are burnt in each step, and we need to repeat 
the process P^^^ times, the average length of each chain 
that is consumed in the bonding process is 



M = 2P-^ + 1 



2(1 -pO 



+ 1 



(41) 
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where the extra +1 counts the qubits that will establish 
the vertical link. The number of entangling operations 
needed to make a vertical bond is then 

A^bond = 2N{M) + P;^ = 2N{M) + ii^M ^ (42) 

Ps 

where the extra takes into account the number of 
entangling operations that are needed to link the cherries 
together into a vertical bond. In Tabled we calculated 
the number of entangling operations that are needed to 
forge a vertical bond, given several specific values for the 
success, failure, and insurance probabilities. 

VI. CONCLUSIONS 

We analysed a hybrid architecture for quantum comput- 
ing using stationary and flying qubits, which is based on 
our earlier work p3ll44j . in detail. It was shown that this 
new approach solves some of the most pressing problems 
that arise in non-hybrid architectures. Our system is 
scalable, even with non-ideal components, and more im- 
portantly, it uses no direct qubit-qubit interactions. This 
means that the qubits will be subject to less decoherence 
and fewer control errors. When realistic photo-detectors 
are used, photon loss will affect only the efficiency of 
the scheme. Furthermore, our system relies on compo- 
nents that have been demonstrated in experiment, and is 
largely implementation independent. Despite the no-go 
theorem for optical Bell-state measurements, it is in prin- 



ciple possible to implement a deterministic gate between 
distant qubits. 

However, when losses are taken into account, the gate 
becomes necessarily probabilistic. In order to achieve 
robustness against general decoherence and to guarantee 
high fidelities, we showed how to construct cluster- or 
graph-states using the two-qubit gate. Our entangling 
operation, which produces the bonds in the graph states, 
is not limited to physically adjacent matter qubits. As 
a consequence, no extensive swapping operations need 
to be taken into account in the production of nontrivial 
graph states. This architecture for quantum computa- 
tion is inherently distributed, and hence can be used for 
integrated quantum computation and communication 
purposes. 
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